https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:40:28.530072+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07359 cnvd-2016-07359 2026-10-04T15:40:28.674420+00:00 cnvd-2016-07359 https://cve.radiocsirt.org/vuln/euvd-2026-81983 EUVD-2026-81983 2026-10-04T15:40:28.674468+00:00 EUVD-2026-81983 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1242 fkie_cve-2016-1242 2026-10-04T15:40:28.674484+00:00

file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.

 https://cve.radiocsirt.org/vuln/ghsa-jpr7-8rxm-4vgx GHSA-jpr7-8rxm-4vgx — Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter 2026-10-04T15:40:28.674517+00:00

Affected: PyPI: trytond

`file_open` in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.

 https://cve.radiocsirt.org/vuln/gsd-2016-1242 gsd-2016-1242 2026-10-04T15:40:28.674547+00:00 gsd-2016-1242 https://cve.radiocsirt.org/vuln/pysec-2016-13 PYSEC-2016-13 2026-10-04T15:40:28.674560+00:00

Affected: PyPI: trytond

file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1242 UBUNTU-CVE-2016-1242 2026-10-04T15:40:28.674580+00:00

Affected: Ubuntu:16.04:LTS: tryton-server

file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.